SAP GUI – SSO with kerberos autentication on Windows

You can find many blogs and videos about setting up SSO with Kerberos authentication on SAP GUI. With “SNCWIZARD” this has become a real simple procedure.

SSO can be configured even if SAP is running on a different domain than your end user’s computer or even if it is not attached to a domain.
This is because SAP GUI acts as a communication agent between SAP application and your AD and there is no direct communication between SAP application and AD for authentication.

Upgrade the Cryptographic library to latest level.2450794 –How to update CommonCryptoLib in an ABAP system.Following files are extracted from cryptographic library SAR files.Make sure that the Kernel is upgrade to latest level or at least the above files are at latest level.

Check if you need to install the following SAP Notes based on your existing SAP support pack level .2516329– “Kerberos library was not loaded” error when accessing SPNEGO transaction2304831 –Programs fail after CCL 8.5 is installed